[Mimedefang] Missing Web Attachments

[Albert E. Whale]

Thank you Alberto, this is also exceptionally useful information as well.

Alberto.daSilva at rmb.co.za wrote:

> Albert E. Whale Wrote:
>
> >Hmm, looks like I missed this piece of data on the attachment's Defang
> Warning:
> >
> >An attachment named Yahoo!.url was removed from this document as it
> >constituted a security hazard.  If you require this document, please
> contact
> >the sender and arrange an alternate means of receiving it.
> >
> >I believe that this message was mangled because the .url was mentioned in
> the
> >'Default' Windoze Minimum Bad_Extension Definition.
> >
> >While I did not write the Bad_Ext, I don't understand the 'danger' of
> >transmitting the *.url files to unwitting Windoze users.  What are these
> file
> >types?
>
> The list of dangerous extension is from MicroSloth:
>
> See  http://office.microsoft.com/Assistance/2000/Out2ksecFAQ.aspx
>      http://www.rudolphtire.com/mimedefang-howto/#ss12.4
>
> M$ classified *.url as bad.
>
> Alberto da Silva
>
> _______________________________________________
> MIMEDefang mailing list
> MIMEDefang at lists.roaringpenguin.com
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

--
Albert E. Whale - CISSP
http://www.abs-comptech.com
----------------------------------------------------------------------
ABS Computer Technology, Inc. - ESM, Computer & Networking Specialists
Sr. Security, Network, and Systems Consultant
Board of Directors - InfraGard - Pittsburgh, PA